ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-07-24 21:11:53 +00:00
Code Issues Packages Projects Releases Wiki Activity
8,834 Commits 496 Branches 214 Tags
fix/cloud-e2e-stability-master
Commit Graph

159 Commits

Author SHA1 Message Date
Hugo Pereira Brito c6dae3a711 chore: remove __init__.py from test directories (#10582) 2026-07-13 15:09:42 +01:00
Aman a0a0883578 feat(azure): add check to ensure Function Apps redirect HTTP to HTTPS (#11929) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-07-10 13:57:58 +01:00
Hugo Pereira Brito 6f72785a28 fix(azure): warn on optional function app permission failures (#11922) 2026-07-09 16:23:09 +01:00
Hugo Pereira Brito 4484c2f192 fix(azure): refine resource group scoped scan follow-ups (#11796) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-07 11:20:38 +02:00
Abhinav 4cb02a0ead fix(azure): read Flexible Server log retention from logfiles.retention_days (fixes #11757) (#11761) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-07-07 08:19:44 +02:00
Legin 537c3ea71e feat(azure): filtering scans at resource group level (#10657) 
Signed-off-by: Legin-ML <leginml2004@gmail.com>
 2026-07-02 10:27:53 +01:00
Davlet Dzhakishev cd56985480 fix(azure): accept AuditEvent key vault diagnostics (#11660) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-29 14:05:12 +02:00
Vahid Gharavi 92634d4261 fix(azure/postgresql): isolate per-server collection failures (#11595) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-06-26 15:23:44 +01:00
s1ns3nz0 9d8c060c49 feat(azure): add recovery_vault_backup_policy_retention_adequate check (#11047) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-23 13:56:52 +02:00
s1ns3nz0 3ee24fba51 feat(azure): add entra_user_with_recent_sign_in check (#11040) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-23 13:13:02 +02:00
s1ns3nz0 a0fdc96649 feat(azure): add recovery_vault_has_protected_items check (#11048) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-06-22 19:59:25 +01:00
s1ns3nz0 29329f6203 feat(azure): add entra_authentication_methods_policy_strong_auth_enforced check (#11039) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-22 18:18:22 +02:00
s1ns3nz0 6826422a6a feat(azure): add entra_app_registration_credential_not_expired check (#11038) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-22 17:30:18 +02:00
s1ns3nz0 b9298b4023 feat(azure): add network_vnet_ddos_protection_enabled check (#11044) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-22 16:34:52 +02:00
s1ns3nz0 869f0726f5 feat(azure): add network_subnet_nsg_associated check (#11043) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-22 14:03:54 +02:00
s1ns3nz0 6dda1ae485 feat(azure): add aks_cluster_local_accounts_disabled check (#11030) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-22 13:38:17 +02:00
s1ns3nz0 13f51de5c1 feat(azure): add aks_cluster_azure_monitor_enabled check (#11029) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-22 13:17:23 +02:00
s1ns3nz0 bbf54011ea feat(azure): add postgresql_flexible_server_high_availability_enabled check (#11046) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-19 11:59:37 +02:00
s1ns3nz0 d27ec7d62e feat(azure): add postgresql_flexible_server_geo_redundant_backup_enabled check (#11045) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-19 10:21:38 +02:00
s1ns3nz0 d961d7efe4 feat(azure): add mysql_flexible_server_high_availability_enabled check (#11042) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-19 09:00:46 +02:00
s1ns3nz0 7dd08bc6bf feat(azure): add mysql_flexible_server_geo_redundant_backup_enabled check (#11041) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-18 12:41:04 +02:00
s1ns3nz0 82d37c4978 feat(azure): add aks_cluster_defender_enabled check (#11028) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-06-18 10:22:51 +01:00
s1ns3nz0 ddbf3405a0 feat(azure): add defender_ensure_defender_cspm_is_on check (#11037) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-18 10:05:02 +02:00
s1ns3nz0 3c68a121e5 feat(azure): add databricks_workspace_no_public_ip_enabled check (#11036) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-18 09:06:25 +02:00
s1ns3nz0 73059ffc7e feat(azure): add databricks_workspace_public_network_access_disabled check (#11035) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: Hugo P.Brito <hugopbrito@Hugos-MacBook-Pro.local>
 2026-06-17 14:12:18 +02:00
s1ns3nz0 ca97d7d983 feat(azure): add cosmosdb_account_public_network_access_disabled check (#11034) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-17 11:05:09 +02:00
s1ns3nz0 8bc42a5ded feat(azure): add cosmosdb_account_minimum_tls_version check (#11033) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-16 16:42:51 +02:00
s1ns3nz0 6b4fb934f8 feat(azure): add aks_cluster_auto_upgrade_enabled check (#11027) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-06-16 13:56:40 +02:00
s1ns3nz0 b5bb85c956 feat(azure): add cosmosdb_account_backup_policy_continuous check (#11032) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-15 19:20:38 +02:00
s1ns3nz0 9022a3a138 feat(azure): add cosmosdb_account_automatic_failover_enabled check (#11031) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-06-12 13:18:08 +02:00
Br1an e3c4368d32 fix(azure): pass authority to credentials for sovereign clouds (#10284) 
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
 2026-05-29 15:17:41 +02:00
Pedro Martín 723d161c63 fix(az-m365): asyncio.run() in Azure/M365 Celery worker event (#11360) 2026-05-26 11:26:39 +02:00
Hugo Pereira Brito 4c59af93eb fix(azure): require all SMB channel encryption algorithms to be secure (storage_smb_channel_encryption_with_secure_algorithm) (#11327) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-05-25 18:28:21 +02:00
Hugo Pereira Brito 6ca8e726f7 feat(azure): add storage_account_public_network_access_disabled and fix CIS storage mapping (#11334) 2026-05-25 18:17:41 +02:00
Pedro Martín 0ab0e8671d fix(azure): skip system 'master' DB in sqlserver_tde_encrypted_with_cmk (#11233) 2026-05-19 16:34:33 +02:00
Ivan Necheporenko bcaa6ac488 fix(sdk): scan every Azure subscription when display names collide (#10718) 
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-05-07 13:59:38 +02:00
Davlet Dzhakishev 1de01bcb78 fix(azure): tighten flow log workspace checks (#10645) 
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
 2026-04-28 16:57:04 +02:00
Kay Agahd 8985280621 fix(azure): create distinct report per key/secret in keyvault checks (#10332) 
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
 2026-04-07 09:36:48 +01:00
Hugo Pereira Brito 114e86c0dc fix(sdk): ignore disabled users in Entra MFA check (#10426) 2026-03-23 15:21:31 +00:00
Hugo Pereira Brito 7df73a9d4f fix(sdk): use case-insensitive comparison for Azure MySQL flexible server checks (#10396) 2026-03-23 09:59:14 +00:00
Hugo Pereira Brito 1eda94140d fix(sdk): use case-insensitive comparison for Azure VM backup checks (#10395) 2026-03-23 09:45:08 +00:00
Daniel Barranquero 361f8548bf feat(azure): add 'entra_conditional_access_policy_require_mfa_for_admin_portals' check and update compliance (#10330) 2026-03-16 12:14:58 +01:00
Andoni Alonso c8ce590039 feat(m365): add entra_default_app_management_policy_enabled security check (#9898) 
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
 2026-02-26 16:14:29 +01:00
Hugo Pereira Brito db1db7d366 feat(m365): add entra_require_mfa_for_management_api security check (#10150) 
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
 2026-02-25 12:29:23 +01:00
Hugo Pereira Brito f7895e206b fix(azure): standardize resource_id values across Azure checks (#9994) 2026-02-23 17:53:31 +01:00
Hugo Pereira Brito 5784592437 chore(azure): add vault parallelization in keyvault service (#9876) 2026-01-26 13:39:54 +01:00
Hugo Pereira Brito 1bf49747ad chore(entra): enhance performance for user_registration_details and user mfa evaluation (#9236) 2026-01-14 14:01:51 +01:00
johannes-engler-mw 531ba5c31b feat(azure): new check for Entra ID authentication for Azure PostgreSQL Flexible Server (#8764) 
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
 2025-11-14 13:54:57 +01:00
Daniel Barranquero d1380fc19d fix(azure): validation and other errors in cosmosdb, defender, storage and vm (#8915) 2025-11-13 09:17:44 -05:00
Hugo Pereira Brito c7d7ec9a3b fix: add pagination for m365 and azure users retrieval (#8858) 2025-10-08 09:07:18 +02:00